~ / search / GHSA-3gc7-fjrx-p6mg

GHSA-3gc7-fjrx-p6mg

bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

Source: GitHub Advisory Database (reviewed) High CVE-2025-3194

Packages

EcosystemPackageAffectedFixed in
npm bigint-buffer <= 1.1.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.

References

External links from the advisory. They lead to third-party sites.